mirror of
https://github.com/codewhale-hq/Codewhale.git
synced 2026-11-07 10:36:05 -10:00
Lands the 0.10.3 program work that two Codex sessions left uncommitted on
canonical main (chats 01a176ff "Review latest MCP updates" / 01a176e0 "DSH
plugin compatibility"), on top of contributor PR #7086, which merged as itself (5c3d461d8a)
immediately before this commit. The pieces share compiler inputs
(the crate-split moves touch most of them), so they land as one verified
tree rather than as intermediate commits that would not build.
Contents:
- Crate split slices: `codewhale-net`, `codewhale-notify` and
`codewhale-sandbox` crates; runtime config, config persistence, oauth,
settings, catalog cache and Codex model roster moved from tui to runtime;
hooks, extension host config and instruction budget to config; callers
rewired, re-export facades removed (CW-6129).
- Follow-up repairs to #7086 instruction budgets (per-scope budgets,
canonical source labels, `instruction_assembly` session snapshot).
- MCP: official SDK 2.4 host backend by default with `server/discover`
and legacy fallback, metadata/output schema handling, OAuth issuer
binding, Engine/CU server modernization (CW-6713, CW-7543, CW-7544,
CW-7546).
- DSH plugin compatibility from the authorized exception lane `26ba80b06a`:
shared compatibility table, native command lifecycle, reviewed imports,
Native-only filesystem sandbox (CW-7054).
- Computer Use plugin-only cutover: vendored bundle removed, marketplace
install from the independent release (CW-6732).
- Image-heavy sessions: 256 KiB read budget, outbound image omission with
receipts, one smaller retry on HTTP 413 (CW-7550).
- Typed review operation (`core/engine/review.rs`, `runtime_api/review.rs`)
used by Platform structured reviews.
- Receipt-owned Unix uninstall (Refs #7091).
- Steering (CW-7552) and Linux Shift+Enter (CW-7551, Refs #7093) source
changes; runtime/manual proof still pending.
Fixes made during takeover verification:
- MCP: Rust now admits the legacy handshake whenever the SDK classifies the
discovery probe as legacy (any JSON-RPC error, or a result without the
modern supported version); before, servers answering the probe with a
result were refused after it.
- MCP: an admitted legacy handshake reports initialize's own failure (e.g.
401) instead of the probe's -32601.
- MCP: OAuth reactive refresh covers the side-effect-free probe.
- MCP: broker launch failures keep their diagnostic (missing command).
- Tool images must decode before delivery (truncated PNG was accepted).
- THIRD_PARTY_NOTICES lists MCP SDK 2.4.0 and DSH 0.2.1-rc.2 excerpts.
- Changelog entries for MCP, DSH, Computer Use and image validation.
- `#[cfg(test)]` on three test-only items; `cargo fmt --all`; tests updated
to post-cutover behavior (no built-in CU, `$schema` manifests, canonical
paths, lazy CU tools, SyncSession resets instruction assembly).
Verified on this exact tree (macOS, source sha 4353faf1 before changelog
edits; changelog/generated-doc edits only after):
- cargo check --workspace --all-targets --locked: exit 0, no warnings
- codewhale-config 806 passed; codewhale-runtime 850 passed;
codewhale-net 52 passed; codewhale-notify 31 passed; codewhale-cli 501
passed (nextest, 0 failed)
- codewhale-tui lib: 14515 passed, 0 failed, 21 skipped
- extension host npm test: 420 tests, 413 passed, 0 failed, 7 skipped
- web check-facts OK
Linux x86_64 (Boat VM, same source before the #7097 fold-in):
cargo check --workspace --all-targets --locked exit 0; codewhale-config
808, codewhale-runtime 849, codewhale-net 52, codewhale-notify 31,
codewhale-sandbox 100, codewhale-cli 501 passed, 0 failed. The tui lib
test binary was still compiling on the 16 GB VM at commit time.
#7097 (main) was three-way merged into approval_log.rs and clipboard.rs;
re-check after the fold-in: workspace check exit 0; tui approval_log,
clipboard, session_export, file_mention, pet_watch 213 passed.
Not run: hosted CI, clippy -D warnings, release packaging, live provider
or real MCP servers beyond local fixtures, Deepin run for #7093.
Co-Authored-By: Claude Opus 5.5 <[email protected]>
248 lines
11 KiB
TOML
248 lines
11 KiB
TOML
[package]
|
|
name = "codewhale-tui"
|
|
version.workspace = true
|
|
edition.workspace = true
|
|
rust-version.workspace = true
|
|
license.workspace = true
|
|
repository.workspace = true
|
|
description = "Terminal UI for open-source and open-weight coding models"
|
|
autobins = false
|
|
# crates.io rejects packages over 10 MiB compressed, and this crate's test
|
|
# sources, extension-host build inputs and dev-only assets push the package
|
|
# past that cap (0.10.1's upload was refused with HTTP 413 at 11.9 MiB). None
|
|
# of these are compiled, embedded or read by `cargo build` / `cargo install`;
|
|
# the repository keeps them for CI, local test runs and the extension-host
|
|
# build, and only the published package omits them.
|
|
exclude = [
|
|
"tests/**",
|
|
"src/**/tests.rs",
|
|
"src/**/tests/**",
|
|
"src/**/*_tests.rs",
|
|
"src/**/test_cases_*.rs",
|
|
"src/**/*_legacy.rs",
|
|
"src/**/*test_support.rs",
|
|
"src/**/*acceptance.rs",
|
|
"src/conformance.rs",
|
|
"src/conformance/**",
|
|
"src/lib/terminal_mode_test_cases_*.rs",
|
|
"src/llm_client/mock.rs",
|
|
"src/plugins/test_fixture.rs",
|
|
"src/skills/catalog_matrix.rs",
|
|
"src/compaction/survival_contract.rs",
|
|
"src/compaction/SURVIVAL_CONTRACT.md",
|
|
"src/compaction/validate_survival_contract.mjs",
|
|
"src/compaction/fixtures/**",
|
|
"src/commands/contract/config_policy_baseline.rs",
|
|
"src/commands/contract/fixtures/**",
|
|
"src/commands/fixtures/diagnostics/**",
|
|
"src/commands/fixtures/*_baseline.md",
|
|
"src/commands/fixtures/*_baseline.json",
|
|
"src/pricing/default_coverage_unpriced.json",
|
|
"src/runtime_web/app.test.mjs",
|
|
"src/runtime_web/orca-evidence.html",
|
|
"src/tui/golden_harness.rs",
|
|
"src/tui/goldens/**",
|
|
"src/tui/pet_watch/worker.rs",
|
|
"src/tui/widgets/pending_input_preview/legacy_fixture.rs",
|
|
"assets/mark-*.png",
|
|
"assets/skills-catalog-matrix.json",
|
|
"extension-host/test/**",
|
|
"extension-host/node_modules/**",
|
|
"extension-host/build.mjs",
|
|
"extension-host/compile-host.mjs",
|
|
"extension-host/package-lock.json",
|
|
"extension-host/scripts/**",
|
|
"extension-host/src/**/*.ts",
|
|
"extension-host/src/dsh/dsh-tools-compat.js",
|
|
"extension-host/dist/agent-presets.mjs",
|
|
"extension-host/dist/avatars.mjs",
|
|
"extension-host/dist/builtin-modules.json",
|
|
"extension-host/dist/protocol.mjs",
|
|
"extension-host/dist/rpc.mjs",
|
|
"extension-host/dist/shell-hooks.mjs",
|
|
"extension-host/dist/skills.mjs",
|
|
"extension-host/dist/stock-adapters.mjs",
|
|
]
|
|
|
|
[lints]
|
|
workspace = true
|
|
|
|
[features]
|
|
default = []
|
|
long-running-tests = []
|
|
# Accepted compatibility feature names. Allocators belong exclusively to the
|
|
# canonical codewhale-cli executable; these library aliases have no effect.
|
|
mimalloc-allocator = []
|
|
rusty-alloc = []
|
|
|
|
[lib]
|
|
name = "codewhale_tui"
|
|
path = "src/lib.rs"
|
|
doctest = false
|
|
|
|
[dependencies]
|
|
# Independent terminal kit, pinned and vendored for reproducible binary builds.
|
|
codewhale-ratatui = { path = "../../vendor/codewhale-ratatui", version = "0.1.2" }
|
|
codewhale-sanitize = { path = "../sanitize", version = "0.10.2" }
|
|
codewhale-memory = { path = "../memory", version = "0.10.2" }
|
|
ahash = "0.8"
|
|
anyhow.workspace = true
|
|
codewhale-agent = { path = "../agent", version = "0.10.2" }
|
|
codewhale-agent-contract = { path = "../agent-contract", version = "0.10.2" }
|
|
codewhale-app-server = { path = "../app-server", version = "0.10.2" }
|
|
codewhale-config = { path = "../config", version = "0.10.2" }
|
|
codewhale-cloud-facts = { path = "../cloud-facts", version = "0.10.2" }
|
|
codewhale-command-contract = { path = "../command-contract", version = "0.10.2" }
|
|
codewhale-commands = { path = "../commands", version = "0.10.2" }
|
|
codewhale-core = { path = "../core", version = "0.10.2" }
|
|
codewhale-execpolicy = { path = "../execpolicy", version = "0.10.2" }
|
|
codewhale-hooks = { path = "../hooks", version = "0.10.2" }
|
|
codewhale-lane = { path = "../lane", version = "0.10.2" }
|
|
codewhale-mcp = { path = "../mcp", version = "0.10.2" }
|
|
codewhale-models = { path = "../models", version = "0.10.2" }
|
|
codewhale-net = { path = "../net", version = "0.10.2" }
|
|
codewhale-notify = { path = "../notify", version = "0.10.2" }
|
|
codewhale-palette = { path = "../palette", version = "0.10.2" }
|
|
codewhale-paths = { path = "../paths", version = "0.10.2" }
|
|
codewhale-protocol = { path = "../protocol", version = "0.10.2" }
|
|
codewhale-release = { path = "../release", version = "0.10.2" }
|
|
codewhale-runtime = { path = "../runtime", version = "0.10.2" }
|
|
codewhale-sandbox = { path = "../sandbox", version = "0.10.2" }
|
|
codewhale-secrets = { path = "../secrets", version = "0.10.2" }
|
|
codewhale-telemetry = { path = "../telemetry", version = "0.10.2" }
|
|
codewhale-tools = { path = "../tools", version = "0.10.2" }
|
|
codewhale-workflow = { path = "../workflow", version = "0.10.2" }
|
|
codewhale-workflow-js = { path = "../workflow-js", version = "0.10.2" }
|
|
async-stream = "0.3.6"
|
|
async-trait.workspace = true
|
|
base64 = "0.23.1"
|
|
axum.workspace = true
|
|
clap.workspace = true
|
|
colored = "3.0.0"
|
|
crossterm = "0.29"
|
|
dotenvy = "0.15.7"
|
|
encoding_rs.workspace = true
|
|
fd-lock = "4.0.4"
|
|
dirs.workspace = true
|
|
futures-util = "0.3.31"
|
|
oauth2 = { version = "5", default-features = false }
|
|
# No ratatui-core pin: ColorCompatBackend answers `get_cursor_position()`
|
|
# from tracked state (ratatui#2640's recommended workaround), so the CPR query
|
|
# inside `Terminal::clear()` no longer races the input loop. See
|
|
# `tui/color_compat.rs`.
|
|
ratatui = { version = "=0.30.2", features = ["unstable-rendered-line-info"] }
|
|
regex = "1.11"
|
|
reqwest = { workspace = true, features = ["blocking", "stream", "form", "http2"] }
|
|
rquickjs.workspace = true
|
|
rmcp = { version = "3.7.0", default-features = false, features = ["auth", "client", "server", "transport-io"] }
|
|
rustls.workspace = true
|
|
qrcode = { version = "0.14", default-features = false }
|
|
similar = { version = "3", features = ["unicode"] }
|
|
ansi-to-tui = { version = "8.0.1", default-features = false }
|
|
# The renderer uses embedded syntax/theme dumps, not external YAML/plist loaders.
|
|
# `regex-onig` (syntect's reference engine) instead of `regex-fancy`: compiled
|
|
# fancy-regex programs for the default syntaxes cost tens of MB of process-lifetime
|
|
# heap once a few languages have been highlighted; Oniguruma holds the same
|
|
# grammars in single-digit MB. The TUI already builds C (bundled SQLite, QuickJS).
|
|
syntect = { version = "5.2", default-features = false, features = ["default-syntaxes", "default-themes", "regex-onig"] }
|
|
serde.workspace = true
|
|
serde_json = { workspace = true, features = ["preserve_order", "raw_value"] }
|
|
yaml-rust2 = { workspace = true }
|
|
shellexpand = "3"
|
|
# Grammar-exact Rust parsing for the post-edit syntax gate (#6204). `syn` is
|
|
# already in the lockfile as a proc-macro build dependency; this reuses that
|
|
# same version rather than vendoring a second parser (#6151). `span-locations`
|
|
# is what turns a parse failure into the `line:column` the model needs — the
|
|
# feature is inert without it.
|
|
syn = { version = "3.0.3", default-features = false, features = ["full", "parsing"] }
|
|
proc-macro2 = { version = "1.0.107", features = ["span-locations"] }
|
|
toml.workspace = true
|
|
toml_edit.workspace = true
|
|
tokio.workspace = true
|
|
tokio-util = { version = "0.7.16", features = ["io"] }
|
|
unicode-width = "0.2"
|
|
unicode-segmentation = "1.12"
|
|
unicode-normalization = "0.1"
|
|
urlencoding = "2.1"
|
|
# Structcopy uses the URL parser directly so its portable closure needs no HTTP client.
|
|
url = "2.5"
|
|
uuid.workspace = true
|
|
chrono.workspace = true
|
|
tempfile.workspace = true
|
|
thiserror.workspace = true
|
|
tracing.workspace = true
|
|
tracing-subscriber.workspace = true
|
|
tower-http.workspace = true
|
|
wait-timeout = "0.2"
|
|
webbrowser = "1.0"
|
|
shlex = "2.0.1"
|
|
globset = "0.4"
|
|
ignore = "0.4"
|
|
image = { version = "0.25", default-features = false, features = ["png", "jpeg", "webp", "gif"] }
|
|
# Already a regular dependency of codewhale-workflow-js (so already linked into
|
|
# this binary); the extension host validates tool input against the schema the
|
|
# plugin registered with it.
|
|
jsonschema.workspace = true
|
|
htmd = "0.5.4"
|
|
# lru >= 0.18.2 fixes RUSTSEC-2026-0253 (panic-unsafe `pop()`).
|
|
lru = "0.18"
|
|
parking_lot = "0.12"
|
|
tar = "0.4"
|
|
# Vendored static liblzma keeps the full-fidelity session archive export
|
|
# (`session_export`) hermetic on every release target; no system xz headers.
|
|
# liblzma is the maintained, API-compatible continuation of xz2.
|
|
liblzma = { version = "0.4", features = ["static"] }
|
|
flate2 = "1.1"
|
|
sha2.workspace = true
|
|
# Reuse the locked cryptographic implementation for exact-call user decisions.
|
|
ring = "0.17"
|
|
semver.workspace = true
|
|
codewhale-localization = { path = "../localization", version = "0.10.2" }
|
|
shell-words = "1.1.1"
|
|
|
|
[build-dependencies]
|
|
codewhale-build-support = { path = "../build-support", version = "0.10.2" }
|
|
|
|
[dev-dependencies]
|
|
codewhale-notify = { path = "../notify", version = "0.10.2", features = ["test-thread-scoped-state"] }
|
|
codewhale-config = { path = "../config", version = "0.10.2", features = ["schema", "test-support"] }
|
|
codewhale-agent-contract = { path = "../agent-contract", version = "0.10.2", features = [
|
|
"test-support",
|
|
] }
|
|
codewhale-runtime = { path = "../runtime", version = "0.10.2", features = [
|
|
"test-support",
|
|
"test-thread-scoped-state",
|
|
] }
|
|
codewhale-sandbox = { path = "../sandbox", version = "0.10.2", features = ["test-support"] }
|
|
codewhale-models = { path = "../models", version = "0.10.2", features = [
|
|
"test-support",
|
|
] }
|
|
cucumber = "0.23.0"
|
|
wiremock = "0.6"
|
|
tiny_http = "0.12"
|
|
pretty_assertions = "1.4"
|
|
rio-vt = "0.5.1"
|
|
rusqlite.workspace = true
|
|
schemars = { version = "1.2.1", features = ["derive", "preserve_order"] }
|
|
tokio-tungstenite = "0.30"
|
|
|
|
[target.'cfg(unix)'.dependencies]
|
|
libc = "0.2"
|
|
|
|
[target.'cfg(windows)'.dependencies]
|
|
windows-sys = { version = "0.61.2", features = ["Wdk_Storage_FileSystem", "Win32_System_IO", "Win32_Foundation", "Win32_Security", "Win32_Security_Authorization", "Win32_Security_Isolation", "Win32_Storage_FileSystem", "Win32_System_LibraryLoader", "Win32_System_Pipes", "Win32_System_Threading", "Win32_System_SystemServices", "Win32_System_WindowsProgramming"] }
|
|
|
|
|
|
[target.'cfg(any(target_os = "macos", target_os = "windows", all(target_os = "linux", not(target_env = "ohos"))))'.dependencies]
|
|
arboard = { version = "3.4", features = ["wayland-data-control"] }
|
|
|
|
[target.'cfg(not(target_env = "ohos"))'.dependencies]
|
|
portable-pty = "0.9"
|
|
|
|
[target.'cfg(target_os = "macos")'.dependencies]
|
|
objc2 = "0.6.3"
|
|
objc2-foundation = { version = "0.3.2", default-features = false, features = ["std", "NSArray", "NSDictionary", "NSError", "NSObject", "NSString", "NSURL"] }
|
|
|
|
[target.'cfg(target_os = "windows")'.dependencies]
|
|
windows = { version = "0.62", features = ["Win32_Foundation", "Win32_Security", "Win32_Security_Authorization", "Win32_Storage_FileSystem", "Win32_System_Console", "Win32_System_Diagnostics_ToolHelp", "Win32_System_Environment", "Win32_System_JobObjects", "Win32_System_Registry", "Win32_System_Threading", "Win32_UI_WindowsAndMessaging"] }
|